During a phishing exercise, a few privileged users ranked high on the failure list. The enterprise would like to ensure that privileged users have an extra security-monitoring control in place. Which of the following Is the MOSTlikely solution?

User and entity behavior analytics

Requirements to change the local password

Users are reporting intermittent access issues with & new cloud application that was recently added to the network. Upon investigation, he scary administrator notices the human resources department Is able to run required queries with the new application, but the marketing department is unable to pull any needed reports on various resources using the new application. Which of the following MOST likely needs to be done to avoid this in the future?

Update the marketing department's browser.

A security administrator has been tasked with hardening a domain controller against lateral movement attacks. Below is an output of running services: Which of the following configuration changes must be made to complete this task?

Stop the Print Spooler service and set the startup type to disabled.

Stop the DNS Server service and set the startup type to disabled.

Stop the Active Directory Web Services service and set the startup type to disabled.

Stop Credential Manager service and leave the startup type to disabled.

An architectural firm is working with its security team to ensure that any draft images that are leaked to the public can be traced back to a specific external party. Which of the following would BEST accomplish this goal?

Utilize watermarks in the images that are specific to each external party.

Properly configure a secure file transfer system to ensure file integrity.

Have the external parties sign non-disclosure agreements before sending any images.

Only share images with external parties that have worked with the firm previously.

Utilize watermarks in the images that are specific to each external party.

Users are reporting intermittent access issues with a new cloud application that was recently added to the network. Upon investigation, the security administrator notices the human resources department is able to run required queries with the new application, but the marketing department is unable to pull any needed reports on various resources using the new application. Which of the following MOST likely needs to be done to avoid this in the future?

Update the marketing department's browser.

Due to budget constraints, an organization created a policy that only permits vulnerabilities rated high and critical according to CVSS to be fixed or mitigated. A security analyst notices that many vulnerabilities that were previously scored as medium are now breaching higher thresholds. Upon further investigation, the analyst notices certain ratings are not aligned with the approved system categorization. Which of the following can the analyst do to get a better picture of the risk while adhering to the organization's policy?

Align the impact subscore requirements to the predetermined system categorization.

Align the exploitability metrics to the predetermined system categorization.

Align the remediation levels to the predetermined system categorization.

Align the impact subscore requirements to the predetermined system categorization.

Align the attack vectors to the predetermined system categorization.

An analyst received a list of IOCs from a government agency. The attack has the following characteristics:1- The attack starts with bulk phishing.2- If a user clicks on the link, a dropper is downloaded to the computer.3- Each of the malware samples has unique hashes tied to the user.The analyst needs to identify whether existing endpoint controls are effective. Which of the following risk mitigation techniques should the analyst use?

Update the incident response plan.

Deploy a honeypot onto the laptops.

A software company is developing an application in which data must be encrypted with a cipher that requires the following:* Initialization vector* Low latency* Suitable for streamingWhich of the following ciphers should the company use?

Cipher block chaining message authentication code

A company created an external, PHP-based web application for its customers. A security researcher reports that the application has the Heartbleed vulnerability. Which of the following would BEST resolve and mitigate the issue? (Select TWO).

Changing the web server from HTTPS to HTTP

Changing the code from PHP to ColdFusion

A client is adding scope to a project. Which of the following processes should be used when requesting updates or corrections to the client's systems?

The change control board must review and approve a submission.

The implementation engineer requests direct approval from the systems engineer and the Chief Information Security Officer.

The change control board must review and approve a submission.

The information system security officer provides the systems engineer with the system updates.

The security engineer asks the project manager to review the updates for the client's system.

A security engineer needs to review the configurations of several devices on the network to meet the following requirements:* The PostgreSQL server must only allow connectivity in the 10.1.2.0/24subnet.* The SSH daemon on the database server must be configured to listento port 4022.* The SSH daemon must only accept connections from a Singleworkstation.* All host-based firewalls must be disabled on all workstations.* All devices must have the latest updates from within the past eightdays.* All HDDs must be configured to secure data at rest.* Cleartext services are not allowed.* All devices must be hardened when possible.Instructions:Click on the various workstations and network devices to review the posture assessment results. Remediate any possible issues or indicate that no issue is found.Click on Server A to review output data. Select commands in the appropriate tab to remediate connectivity problems to the pOSTGREsql DATABASE VIA ssh WAP A PC A Laptop A Switch A Switch B: Laptop B PC B PC C Server A

See the Explanation below for the solution.

The Chief Information Security Officer is concerned about the possibility of employees downloading 'malicious files from the internet and 'opening them on corporate workstations. Which of the following solutions would be BEST to reduce this risk?

Execute the files in the sandbox on the web proxy.

Integrate the web proxy with threat intelligence feeds.

Scan all downloads using an antivirus engine on the web proxy.

Block known malware sites on the web proxy.

Execute the files in the sandbox on the web proxy.

To save time, a company that is developing a new VPN solution has decided to use the OpenSSL library within Its proprietary software. Which of the following should the company consider to maximize risk reduction from vulnerabilities introduced by OpenSSL?

Implement an ongoing, third-party software and library review and regression testing.

Include stable, long-term releases of third-party libraries instead of using newer versions.

Ensure the third-party library implements the TLS and disable weak ciphers.

Compile third-party libraries into the main code statically instead of using dynamic loading.

Implement an ongoing, third-party software and library review and regression testing.

A mobile administrator is reviewing the following mobile device DHCP logs to ensure the proper mobile settings are applied to managed devices: Which of the following mobile configuration settings is the mobile administrator verifying?

Service set identifier authentication

802.1X with mutual authentication

Association MAC address randomization

A cloud security engineer is setting up a cloud-hosted WAF. The engineer needs to implement a solution to protect the multiple websites the organization hosts. The organization websites are:* www.mycompany.org* www.mycompany.com* campus.mycompany.com* wiki. mycompany.orgThe solution must save costs and be able to protect all websites. Users should be able to notify the cloud security engineer of any on-path attacks. Which of the following is the BEST solution?

Purchase one wildcard certificate.

Implement self-signed certificates.

Purchase one certificate for each website.

Purchase one wildcard certificate.

A security manager has written an incident response playbook for insider attacks and is ready to begin testing it. Which of the following should the manager conduct to test the playbook?

Automated vulnerability scanning

Centralized logging, data analytics, and visualization

An IPSec solution is being deployed. The configuration files for both the VPNconcentrator and the AAA server are shown in the diagram.Complete the configuration files to meet the following requirements:* The EAP method must use mutual certificate-based authentication (Withissued client certificates).* The IKEv2 Cipher suite must be configured to the MOST secureauthenticated mode of operation,* The secret must contain at least one uppercase character, one lowercasecharacter, one numeric character, and one special character, and it mustmeet a minimum length requirement of eight characters,INSTRUCTIONSClick on the AAA server and VPN concentrator to complete the configuration.Fill in the appropriate fields and make selections from the drop-down menus. VPN Concentrator: AAA Server:

See the Explanation below for the solution.

In a cloud environment, the provider offers relief to an organization's teams by sharing in many of the operational duties. In a shared responsibility model, which of the following responsibilities belongs to the provider in a Paas implementation?

Application-specific data assets

Application user access management

Application-specific logic and code

A security architect recommends replacing the company's monolithic software application with a containerized solution. Historically, secrets have been stored in the application's configuration files. Which of the following changes should the security architect make in the new system?

Store the secrets inside the Dockerfiles.

Run all Dockerfles in a randomized namespace.

The CI/CD pipeline requires code to have close to zero defects and zero vulnerabilities. The current process for any code releases into production uses two-week Agile sprints. Which of the following would BEST meet the requirement?

An open-source automation server

A single code repository for all developers

Which of the following BEST describes a common use case for homomorphic encryption?

Transmitting confidential data to a CSP for processing on a large number of resources without revealing information

Processing data on a server after decrypting in order to prevent unauthorized access in transit

Maintaining the confidentiality of data both at rest and in transit to and from a CSP for processing

Transmitting confidential data to a CSP for processing on a large number of resources without revealing information

Storing proprietary data across multiple nodes in a private cloud to prevent access by unauthenticated users

An organization is looking to establish more robust security measures by implementing PKI. Which of the following should the security analyst implement when considering mutual authentication?

Perfect forward secrecy on both endpoints

Shared secret for both endpoints

A common public key on each endpoint

A common private key on each endpoint

CompTIA CAS-004 Practice Test 7 - Free Online Exam Questions 241-280

A company hosts a large amount of data in blob storage for its customers. The company recently had a number of issues with this data being prematurely deleted before the scheduled backup processes could be completed. The management team has asked the security architect for a recommendation that allows blobs to be deleted occasionally, but only after a successful backup. Which of the following solutions will BEST meet this requirement?

Become a Premium Member for full access

Unlock Premium Member

CompTIA CAS-004 Practice Test 7

Question

CompTIA CAS-004 Practice Tests

Practice Tests